Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

File that has no info on internet!


  • Please log in to reply
6 replies to this topic

#1 tomkat888

tomkat888

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:44 AM

Posted 04 December 2014 - 09:43 PM

Does anybody know what this files is? Nothing is posted in the web for this! It appeared in my computer and I can't delete this at all!


Spybot - Search & Destroy
File Scanner 2.4.40.135
Log created at 12/4/2014 6:21:31 PM
Results Copyright © 2009-2014 Safer-Networking Ltd.

C:\Program Files (x86)\RepenaAuite\libeay32.dll
clean
C:\Program Files (x86)\RepenaAuite\libgcc_s_dw2-1.dll
clean
C:\Program Files (x86)\RepenaAuite\libstdc++-6.dll
clean
C:\Program Files (x86)\RepenaAuite\libwinpthread-1.dll
clean
C:\Program Files (x86)\RepenaAuite\Qt5Core.dll
clean
C:\Program Files (x86)\RepenaAuite\Qt5Network.dll
clean
C:\Program Files (x86)\RepenaAuite\RepenaAuite.exe
clean
C:\Program Files (x86)\RepenaAuite\RepenaAuiteHelper.exe
clean
C:\Program Files (x86)\RepenaAuite\ssleay32.dll
clean

The digital signature is Red Sky Sp. Z o.o.

Tks

Tks

BC AdBot (Login to Remove)

 


m

#2 Nikhil_CV

Nikhil_CV

    Vestibulum Bleep


  • Members
  • 1,145 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:err: Destination unreachable! bash!
  • Local time:07:14 AM

Posted 04 December 2014 - 10:36 PM

Hi,
Welcome to BC.
Have you figured out the paths given in the log above?
Did you find specified files or more in that location?
Is there any toolbars/tabs in your browser that you dont intend to use or any browser redirects?
Can you locate any programs in control panel/start menu related to this?
It seems there is a PUP/PUA/PUS in your machine that needs to be removed with help of corresponding section (AAI)..
[edit] AAI:
http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/
and virus,trojan, spyware and malware removal logs :

http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

Edited by Nikhil_CV, 04 December 2014 - 10:40 PM.

Regards : CV                                                                                                    There is no ONE TOUCH key to security!
                                                                                                                                       Be alert and vigilant....!
                                                                                                                                  Always have a Backup Plan!!! Because human idiotism doesn't have a cure! Stop highlighting!
                                                     Questions are to be asked, it helps you, me and others.  Knowledge is power, only when its shared to others.            :radioactive: signature contents © cv and Someone....... :wink:

#3 tomkat888

tomkat888
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:44 AM

Posted 05 December 2014 - 01:56 AM

these are the only files in this folder. and my browser keeps popping up with stupid advertisment stuff but i dont know if this file is the cause or something. 

my concern is it just doesnt want to delete. i tried using this program to delete files that wont delete. i exhausted myself.

 

what can i do?



#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:44 AM

Posted 05 December 2014 - 06:51 AM

All are generally for people who use c++ coding and could be cleaned with a Temp File Cleaner ......... All details (and more) are from Google .
First Item -C:\Program Files (x86)\RepenaAuite\libeay32.dll - libeay32.dll contains encryption functions which allow for coded communications over networks. This file is opensource and is used in many opensource programs to help with SSL communication
C:\Program Files (x86)\RepenaAuite\libgcc_s_dw2-1.dll Answered below
Next item - C:\Program Files (x86)\RepenaAuite\libstdc++-6.dll - c++ coding (similar below)
Next item - C:\Program Files (x86)\RepenaAuite\libwinpthread-1.dll
Name. libwinpthread-1.dll - Name of product. Rocket Library Viewer plug-in
Next item - C:\Program Files (x86)\RepenaAuite\Qt5Core.dll see below.
Next item - C:\Program Files (x86)\RepenaAuite\Qt5Network.dll - File description: C++ application development framework.
Reinstall Wave lab if you want it, but it is not required.
Next item - C:\Program Files (x86)\RepenaAuite\RepenaAuite.exe (See Below.)
Next  item - C:\Program Files (x86)\RepenaAuite\RepenaAuiteHelper.exe
This often shows as ieHelper.exe and can be removed with a Updated version of  Malwarebytes Anti-Malware Free, then run Temp File Cleaner by Old Timer
Last item - C:\Program Files (x86)\RepenaAuite\ssleay32.dll
ssleay32.dll is a module associated with The OpenSSL Toolkit from The OpenSSL Project, http://www.openssl.org/. Non-system processes like ssleay32.dll originate from software you installed on your system.

 

A site quote >>>
Red Sky sp z o.o is a company specializing in building and maintaining the frontier of search engine services and communities. We reach over 19 million unique users per month. We develop software with the latest technologies, and according to the latest trends, with particular emphasis on the final satisfaction of our customers.

 

 

To do a decent cleanup ...............

 

Please download and run RKill by Grinler.
 A black DOS box will appear for a short time and then disappear.
 This is normal and indicates the tool ran successfully.
 At most the tool will usually run for about 2 minutes
 Please Copy / Paste the small log back here.
 
Do not reboot your computer until you complete the next step.

 NOW :

  • Download AdwCleaner by Xplode and save to your Desktop.
  • Double-click on AdwCleaner.exe to run the tool.
     * Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button (only once)
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button only once for accuracy.
  • A report (AdwCleaner[R0].txt) will open in Notepad for your review.
  • Check the listed removals and see if you are OK with them.
  • If you have questions, post the Report log back here.

 Next

  • Click on the Clean button only once for accuracy
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK finally to allow AdwCleaner to Restart the computer and complete the removal process.
  • After rebooting, a log report (AdwCleaner[S0].txt) will open automatically.
    Copy and Paste the contents of that log in your next reply.

Note: With most Adware / Junkware / PUPs it is strongly recommended to deal with it like a legitimate program and uninstall from Programs and Features or Add/Remove Programs in the Control Panel. In many cases, using the uninstaller of the adware not only removes the adware more effectively, but it also restores any changed configuration. After uninstallation, then you can run specialized tools like AdwCleaner and JRT to fix any remaining entries they may find.
 

 

 

Note - If not installed, please follow these directions -

Please download Malwarebytes Anti-Malware A.K.A. MBAM

  • Follow the simple directions to install the program to desktop
  • Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard
  • Please Check for Updates by clicking the Update Now... link
  • Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to "Treat detections as malware".
  • Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.
  • If you find malware and tick it to remove it, you may be asked th re-boot the computer to finish cleaning.
  • Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

  • After the scan, make sure that everything is checked and then click the Remove Selected button to remove all the listed malware.
  • After rebooting the computer, copy and past the mbam.log in your next reply.

If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.

 

I would like you to Copy and Paste the report logs from RKill / AdwCleaner / and MBAM back here

 

When completed - Please download Temp File Cleaner by Old Timer
1 .Download TFC from the download link above and save the file on your desktop.
2 .Close ALL running applications as TFC will terminate them before attempting to clean up the temporary files.
3 .Double-click on the TFC icon.
4 .When the program opens, click on the Start button.  TFC will terminate the Explorer process and all running applications and then begin the process of cleaning out all of your temp folders.
5 .When done, press OK > Exit, and Reboot your computer to finish the cleanup
No log is produced or expected.
Note: After removing temp files, the computer may show to be slow than usual, but it will improve once the cache is rebuild.

 

 

Personally - Spybot  Search & Destroy is a part Antivirus that will cause problems if you have another Antivirus installed. My version is to uninstall Spybot these days, and just use any Free or Paid Antivirus progran, and couple this with  Malwarebytes Anti-Malware program.

 

Thank You -


Edited by noknojon, 05 December 2014 - 06:53 AM.


#5 tomkat888

tomkat888
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:44 AM

Posted 05 December 2014 - 01:02 PM

ok thanks for your help.

 

im going to do all u say but its gonna take some time.

 

my question is why the hell i have this file when its not even mentioned on the world wide web?

 

 

 C:\Program Files (x86)\RepenaAuite\RepenaAuite.exe  this one in particular RepenaAuite there is no search of this whatsoever how did it go to my computer?

this is crazy!!



#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:44 AM

Posted 05 December 2014 - 01:40 PM

Hello -

You are looking too deep >>  C:\Program Files (x86)\RepenaAuite\RepenaAuite.exe is not what to look for.

 

Start just with the final extension or even part of it >> RepenaAuite.exe will most likely cover the full item.

 

I found in about 1 minute (with Google), that this often shows as ieHelper.exe, a very minor downloaded "extra", like a minor infection.

You have downloaded it with another program, so I listed a basic cleanup set of programs.

 

The main host may have been >> Red Sky sp z o.o < This is a minor download spam host that contains items as you list.

I think that I said that none of these were required, so please clean out with the other programs I left.

 

Do you run a normal active Antivirus ?? If you are not sure just follow from below (it is a 100% safe program).

 

Download Screen317 Security Check from Here or Here and save it to your Desktop.

  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt
  • Please Copy / Paste the contents of that document.

Note 1:: If any security program requests permission to access the Internet, allow it to
Note 2. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message, (or similar) restart computer and Security Check should run

 

 

All programs I have listed are clean and 100% free, and to run the full lot will take no more (on average) than 30 minutes, and that includes posting the results back here. It will take me longer to read the reports :busy:

Then uninstall Spybot at your own time and all done.

 

Thank You



#7 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:44 AM

Posted 05 December 2014 - 02:19 PM

libeay32.dll (or .exe) may even be a part of Filezilla (if you or someone has used that, or similar programs)

Another example of a shorter extension being easier to find.

Qt5Core.dll listed Quote "About 15,900 results (0.20 seconds)" < from Google
While libeay32.dll Listed Quote "About 231,000 results (0.20 seconds)" and covers up to Runtime errors from 2010

 

Thank You -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users